------------[ cut here ]------------ wlan1: Failed check-sdata-in-driver check, flags: 0x4 WARNING: CPU: 0 PID: 325961 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x554/0x5f0 net/mac80211/driver-ops.h:172 Modules linked in: CPU: 0 PID: 325961 Comm: syz-executor.3 Not tainted 5.10.233 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:drv_bss_info_changed+0x554/0x5f0 net/mac80211/driver-ops.h:172 Code: 49 8b ac 24 a8 03 00 00 48 85 ed 74 3e e8 a4 83 8c fd e8 9f 83 8c fd 8b 54 24 04 48 89 ee 48 c7 c7 40 c5 95 84 e8 8c 07 25 00 <0f> 0b e9 c7 fd ff ff 4c 89 ff e8 0d 7b b8 fd e9 97 fb ff ff 4c 89 RSP: 0018:ffff888032e4f5c8 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000040000 RSI: ffffffff8129ea83 RDI: ffffed10065c9eab RBP: ffff888039478000 R08: 0000000000000001 R09: ffff88806ce37b0f R10: 0000000000000000 R11: 0000000000000001 R12: ffff888039478bc0 R13: 0000000000400000 R14: ffff888039479da0 R15: ffff888039479d98 FS: 00007fcff1cea700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcff1ce8ff8 CR3: 00000000664aa000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: ieee80211_bss_info_change_notify+0x9a/0xc0 net/mac80211/main.c:212 ieee80211_ocb_leave+0x1ed/0x340 net/mac80211/ocb.c:228 rdev_leave_ocb net/wireless/rdev-ops.h:382 [inline] __cfg80211_leave_ocb+0x1d6/0x570 net/wireless/ocb.c:70 cfg80211_leave_ocb+0x4e/0x70 net/wireless/ocb.c:84 cfg80211_change_iface+0x843/0xf90 net/wireless/util.c:1064 nl80211_set_interface+0x67c/0x8f0 net/wireless/nl80211.c:3811 genl_family_rcv_msg_doit+0x22d/0x330 net/netlink/genetlink.c:739 genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] genl_rcv_msg+0x33c/0x5a0 net/netlink/genetlink.c:800 netlink_rcv_skb+0x14b/0x430 net/netlink/af_netlink.c:2485 genl_rcv+0x24/0x40 net/netlink/genetlink.c:811 netlink_unicast_kernel net/netlink/af_netlink.c:1307 [inline] netlink_unicast+0x549/0x7f0 net/netlink/af_netlink.c:1333 netlink_sendmsg+0x90f/0xdf0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:651 [inline] __sock_sendmsg+0x154/0x190 net/socket.c:663 __sys_sendto+0x21c/0x320 net/socket.c:2005 __do_sys_sendto net/socket.c:2017 [inline] __se_sys_sendto net/socket.c:2013 [inline] __x64_sys_sendto+0xdd/0x1b0 net/socket.c:2013 do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x67/0xd1 RIP: 0033:0x7fcff47278ac Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b RSP: 002b:00007fcff1ce8f80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007fcff1ce90f0 RCX: 00007fcff47278ac RDX: 0000000000000024 RSI: 00007fcff1ce9140 RDI: 0000000000000004 RBP: 0000000000000000 R08: 00007fcff1ce8fd4 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 R13: 00007fcff1ce9140 R14: 0000000000000004 R15: 0000000000000000 irq event stamp: 4353 hardirqs last enabled at (4363): [] console_unlock+0x92d/0xb40 kernel/printk/printk.c:2567 hardirqs last disabled at (4372): [] console_unlock+0x839/0xb40 kernel/printk/printk.c:2482 softirqs last enabled at (4350): [] asm_call_irq_on_stack+0x12/0x20 softirqs last disabled at (4237): [] asm_call_irq_on_stack+0x12/0x20 ---[ end trace 6252eba5a7de3b05 ]--- Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. Bluetooth: hci6: command 0x0406 tx timeout netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. kauditd_printk_skb: 15 callbacks suppressed audit: type=1326 audit(1737217164.153:1980): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=328819 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe706ffb19 code=0x0 Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures Module has invalid ELF structures netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue